Capital Mortgage Group · Updated 29 October 2026

Privacy Policy

This policy explains how Capital Mortgage Group Pty Ltd (ABN 33 621 059 756, ACN 621 059 756, Australian Credit Licence 508010), trading as Capital Mortgage Group, handles personal information for commercial finance services and agreed consumer mortgage broker introductions.

Contact and privacy requests

Privacy Officer, Capital Mortgage Group Pty Ltd
info@capitalmortgagegroup.com.au · 0409 190 055
Level 1, Suite 1.01, 222 Pitt St, Sydney NSW 2000.

What we collect and why

Initial enquiries may include your name, phone number, email, property location, proposed loan amount and project details. For a commercial application or guarantee, relevant information may include identification, company and trust details, financial statements, assets and liabilities, existing loans, property details, project feasibilities, budgets, approvals, construction documents and information about directors, beneficial owners and guarantors.

We use relevant information to respond to you, assess and source commercial finance, communicate about and administer the engagement, handle complaints and meet applicable legal obligations. If you do not provide information needed for a service, we may be unable to assist.

Sources and credit reports

We collect information directly from you and, where authorised or legally permitted, from relevant lenders, accountants, solicitors, valuers and other parties involved in your enquiry or application. Capital Mortgage Group does not obtain credit reports. A lender or separately licensed broker may undertake its own checks and must provide its own applicable disclosures and obtain any required authority.

Who may receive information

Relevant information may be provided to prospective private commercial lenders and their professional advisers, valuers, quantity surveyors, solicitors, settlement agents, insurers, and technology or administrative service providers where necessary for the service or otherwise authorised or required by law. We do not use a mortgage aggregator for commercial applications.

For a consumer home-loan introduction, we obtain your separate express agreement before sharing the information needed with the receiving licensed mortgage broker. That broker provides its own privacy disclosures. Sending us an initial enquiry does not authorise a broker referral or a credit check.

Secure Storage and Protection of Client Information

At Capital Mortgage Group, we take the privacy, confidentiality and security of our clients’ personal, financial and commercially sensitive information seriously.

To ensure the secure management and storage of client information, we utilise Microsoft 365 OneDrive, a cloud-based document storage platform that incorporates advanced security and data protection technologies.

Our Microsoft 365 environment is configured with multiple layers of security, including:

• Multifactor Authentication (MFA): Additional identity verification measures to help prevent unauthorised access to client information.
• Restricted Access Permissions: Access to confidential documents is limited to authorised individuals with a legitimate business requirement.
• Secure Document Sharing: Controlled sharing permissions are used to help ensure sensitive information is only accessible to intended recipients.
• Data Encryption: Microsoft OneDrive uses encryption technologies to protect information during transmission and while stored.
• Australian Data Storage and Access: Our OneDrive environment is configured to restrict the storage of, and access to, client information to Australia.

These measures are designed to safeguard information such as identification documents, financial statements, property valuations, loan applications, company records and other confidential documentation provided in connection with our finance services.

Where information needs to be shared with lenders, valuers, solicitors or other authorised professional service providers, we take reasonable steps to ensure that disclosures are appropriate, secure and consistent with applicable privacy requirements.

Capital Mortgage Group is committed to handling personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles, where applicable.

While we maintain security measures designed to minimise the risk of unauthorised access, loss, misuse or disclosure, no electronic storage system can be guaranteed to be entirely risk-free.

Your privacy and the protection of your confidential information remain fundamental to the way we conduct our business.

Retention and application documents

Please do not send identity documents, bank statements or sensitive financial documents through the initial website enquiry. Contact us first to arrange an appropriate document-sharing method. We retain information as needed for the purposes for which it was collected and applicable legal, regulatory and record-keeping requirements. When it is no longer needed and retention is not required, we take reasonable steps to destroy or de-identify it.

Overseas handling and service providers

CMG does not itself send applications to overseas processing teams or appoint overseas application processors. The Australia-specific OneDrive configuration described above concerns CMG’s client document storage and access. This is distinct from the technical operation of third-party website, security and email services. Those providers may use international infrastructure or support, including processing in the United States and other countries in which they operate; we do not represent that all provider processing is confined to Australia. Provider arrangements and processing locations can change. Contact our Privacy Officer for information about the providers relevant to your enquiry. Applicable privacy obligations continue to apply to our handling of your information.

Website and marketing

The enquiry form prepares a draft in your own email application. You choose whether to send it; entering details into this form does not itself submit them to CMG. The comparison slider runs in your browser. We have not added advertising pixels, a marketing analytics service or marketing subscriptions to this website. The hosting and security services may process technical information such as IP addresses, browser details and request logs to deliver, protect and operate the website.

An enquiry is not a blanket consent to marketing. You may ask us not to send marketing communications, or use an unsubscribe option where provided. We may still send communications needed to deal with your enquiry, an existing engagement or legal obligations.

Access and correction

You may request access to or correction of personal information we hold by contacting our Privacy Officer. We may need to verify your identity and will respond within a reasonable period in accordance with applicable law. Where access or correction is refused, we explain the reason and complaint options where required.

Privacy complaints

Contact our Privacy Officer by phone, email or post, explaining your concern and preferred outcome. We acknowledge complaints promptly and investigate them under our complaints process. If unresolved, you may complain to the Office of the Australian Information Commissioner: oaic.gov.au/privacy/privacy-complaints. AFCA may also consider an eligible financial-services privacy complaint.

Consent and updates

Where required, we seek consent for the particular activity. You can withdraw consent for future discretionary uses by contacting us, although information may still be retained or used where required or permitted by law. This policy does not itself authorise all disclosures, credit checks or marketing. We update this policy as our services and practices change.